CVE-2026-10789

creationtimestamp| type| source ---|---|--- 2026-06-22 18:00:15+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3movhp2dlvr2j 2026-06-22 18:00:22+00:00| seen| https://infosec.exchange/users/offseq/statuses/116795061835699125 2026-06-22 19:41:51+00:00| seen|...

CVE-2026-10789

A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current...

CVE-2026-10789

Summary: CVE-2026-10789 is a code-injection vulnerability in the MCP extension for Autodesk Fusion Desktop. A malicious webpage visited by a user with Fusion Desktop running and MCP enabled can trigger arbitrary code execution with the current user’s privileges. The CVSS 3.1 score is 9.6 (CRITICA...